10 Top DNS attacks

During recent days, DNS based attacks are on the rise

Traditional Firewalls leave Port 53 open, which is default for DNS queries. So, they are vulnerable to DNS based DDoS Attacks such as amplification, reflection, etc. Since they require high compute performance which is costlier to accurately detect DNS-based attacks, Traditional Protection is ineffective.

If DNS Service goes down, network attached devices stop working. For Companies, this kind of DNS vulnerabilities leads to loss of revenue, customer defection and negative brand impact. 

Top DNS attacks to look out for:

1.   Distributed Reflection DoS attack

2.   Cache poisoning

3.   TCP SYN floods

4.   DNS tunneling

5.   DNS hijacking

6.   Basic NXDOMAIN attack

7.   Phantom Domain attack

8.   Random subdomain attack

9.   Domain lock-up attack

10. Botnet-based attacks from CPE devices

If You Were an Ethical Hacker

FREAK Attack - Must Know Facts

What does FREAK stand for?

FREAK (also known as the Factoring Attack on RSA-EXPORT Keys vulnerability or CVE-2015-0204) is a newly-discovered flaw in SSLTLS, the technology which is supposed to secure your communications across the net.

Why should I be worried?

If the encryption you are relying on for your HTTPS connections is flawed, malicious hackers or intelligence agencies could break it and intercept your communications.They could launch attacks, and potentially sniff out your passwords and private messages.

It's old, why bother now?

In recent weeks, researchers have discovered that they could force browsers to use the weaker encryption and then crack it in a matter of hours, opening up the possibility of stealing passwords and other mischief.
How many websites are affected?

About 12% of websites are thought to be affected.

I own a website, what should I do?

Disable support for any export suites on your web server. Freakattack.com suggests that instead of simply excluding RSA export cipher suites, administrators should disable support for all known insecure ciphers and enable forward secrecy.                                           

Penetration Testing vs Vulnerability Testing - Know the Difference

It has become a very common situation, each time you turn around, there is high profile Data breach in the news. Most of the time, it would be involving Cardholder Data Compromise. This kind of Targeted Breach has been rapidly increasing worldwide.

It is important to focus if the retailer is being compliant with Payment Card Industry Data Security Standards (PCI DSS). If a retailer is not compliant, he is liable to pay fines and even could be suspended from accepting cards.

Now, lets focus on Information Security. It is important to make sure that not only information but all your virtual components needs to be secure. Further to security, basically they should qualify with Penetration and Vulnerability Testing

Often there is a confusion in understanding the differences between Penetration Testing vs Vulnerability Testing. This Confusion arises because these two types of tests are similar. Both these tests are used in identification of weakness in your Network and Application.

Vulnerability Test identifies weaknesses that an hacker might be able to exploit based on standard Methodologies. While Penetration finds weaknesses by having an "White Hat" or "Ethical Hacker", who actually exploits them by penetrating into the required Application or Network. Pentesting requires customization based on the target and is more Expensive than Vulnerability Scanning.

Triad Square Infosec performs expertised Vulnerability Test together with Penetration Testing under VAPT Service for Organizations Globally.

For a Clear Understanding on the differences between Vulnerability and Penetration Testing, follow the side-by-side comparison table 

Item	Vulnerability Testing	Penetration Testing
PCI DSS Requirements	11.2	11.3
Goal	Identify weaknesses that could be exploited by attackers internal and external.	Determine if unauthorized external access to key systems and files can be achieved.
Required Resolution	Rescan as needed, until all “high-risk” vulnerabilities are fixed.	Retest as needed until no vulnerable access points are found.
Who performs?	For internal scans: Qualified internal resource or a qualified third party.For external scans: An Approved Scanning Vendor, approved by PCI SSC)	Qualified internal resource or a qualified third party.
Automation	Can be fully automated because they are based on standard methodologies	Cannot be fully automated because they require customization for target environment and requirements.
Documentation Requirements	Documented Scope.Document Risk   Ranking process	Results should be retained
Scope	Limited to Analysis only	Tests could be performed in External and Internal Environments by Exploit
Frequency	Quarterly and after any significant change in the Structure	Run internal and external tests annually and after significant infrastructure and application upgrades
Components	Servers, routers, switches, workstations, databases, virtual machines or web applications	Social engineering and the exploitation of exposed vulnerabilities, access controls on key systems and files, web-facing applications, custom applications, and wireless connections.
Methodology	Must conform to standard practices	Must be customized for the targets systems and environment